CVE-2014-10037

EPSS 19.4%

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/30865unverified cve_referencewww.exploit-db.com/exploits/30865unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/show/osvdb/102204 https://exchange.xforce.ibmcloud.com/vulnerabilities/90582 http://www.exploit-db.com/exploits/30865